Last updated: 16 March 2023
The following applies to only SudoVanilla Code.
Information You Provide Directly
We collect the Personal Data you provide to us, for example:
Account Information: When you register for an account with SudoVanilla, we collect information that identifies you such as your name, username, email address and password.
Profile Information: We collect information that you voluntarily provide in your user profile; this may include your public avatar (which may be a photo), additional email addresses, company/organization name, job title, country, social media handles, and biography. Please note this information may be visible to other users of the Services and to the public depending on the privacy setting you apply.
Content you provide through the use of the Services: Examples of content we collect and store include but are not limited to: the summary and description added to an issue, your repositories, commits, project contributions, profile metadata, activity data, and comments. Content also includes any code, files and links you upload to the Services.
Information About Your Use of the Services We Collect Automatically
We may collect certain Personal Data automatically through your use of the Services, for example:
Device Information and Identifiers: When you access and use our Services, we automatically collect information about your device, which may include: device type, your device operating system, browser type and version, language preference, IP address, hardware identifiers, and mobile IDs. This information may be collected through any use of the Services.
What Personal Data is Not Collected by SudoVanilla?
SudoVanilla does not intentionally collect sensitive Personal Data, such as social security numbers, genetic data, health information, or religious information. Although SudoVanilla does not request or intentionally collect any sensitive Personal Data, we realize that users might store this kind of information in a SudoVanilla repository.
SudoVanilla does not intentionally collect the Personal Data of individuals that are stored in users’ repositories or other free-form content inputs. If Personal Data is stored in a user repository then the repository owner is responsible for its processing.
If you are a child under the age of 13, you may not have an account. With the exception of Educational Licenses, SudoVanilla does not knowingly collect information from, or direct any of our Services to, children under 13. If we learn or have reason to suspect that a user is under the age of 13, we will close the child’s account.
How Does SudoVanilla use my Personal Data?
SudoVanilla uses your Personal Data for the following purposes:
- To create your account, identify and authenticate your access to the Services and provide you with the Services you have requested;
- To send you important information about the Services;
- To send you information you have requested;
- To provide workload and code review recommendations through machine-learning;
- To respond to your requests for customer support;
- To enforce the legal terms that govern our Services;
- To comply with our legal obligations;
- To protect the rights, safety and property of SudoVanilla, you, or any third-party; and
- For other purposes, for which we obtain your consent.
In order to protect your Personal Data, SudoVanilla will only retain your Personal Data for as long as your account is active or as needed to perform our contractual obligations, provide you the Services, comply with legal obligations, resolve disputes, preserve legal rights, or enforce our agreements.
SudoVanilla reserves the right to delete inactive accounts, projects, namespaces, and associated content. SudoVanilla may deem an account, project, or namespace inactive based on various criteria, including, but not limited to, the account creation date, the last time there was a valid log-in, and the date of the last contribution. If we plan to delete your account or projects, we will provide advance notice by sending a message to the email address registered to your account. SudoVanilla encourages you to utilize your account on occasion to avoid the risk of being deemed inactive.
What are my rights and choices regarding Personal Data?
You have the right to access, correct, restrict or delete your Personal Data, and to port your Personal Data to another company. While these rights may vary by jurisdiction, SudoVanilla provides you with the same rights and choices, no matter where you live. We provide these rights free of charge unless your requests are manifestly unfounded and excessive.
You may exercise your choices and rights as follows:
Update your Information: If you already have an account, you may access, update, or alter your user profile information by logging into your account and updating profile settings.
To delete your Account: If you only want to delete your account, you may do so by logging into your account and going to the “Delete my Account” option in your profile settings. If your account is tied to a Company that has entered into a commercial relationship with SudoVanilla, you will have to ask your Company administrator to remove your account from that corporate namespace before we can delete it. Once your account is no longer associated with that corporate namespace, SudoVanilla will process your deletion request according to the process stated herein.
One exception to embedded information in a public project occurs when your Personal Data is added by you or someone else to the comments section of a public project. In such a case, your Personal Data will be redacted since removing this information from only the comments section will not break the project.
If you contribute to a SudoVanilla owned project by commenting in, or creating an issue or merge request and you provide your Personal Data in connection with that contribution, your Personal Data associated with your contribution will be deleted and attributed to a ghost user. However, please note that if the content of the contribution contains Personal Data, this information would remain and you will need to submit a specific request to have this information deleted.
To port your projects: You may port your projects by either using the Export functionality provided within the product which will also include all metadata, or by cloning your repositories. To port your profile information, you may use the API.
To inform your Supervisory Authority: In the unlikely event you disagree with our handling of your request, you have the right to file a complaint with the competent supervisory authority in your jurisdiction.
SudoVanilla may change its Privacy Statement from time to time. When we do, we will update the date at the top of this Statement. If we decide to make a significant change to our Privacy Statement, we will post a notice of the update on the homepage of our Website. We may also provide notification via email of any material changes to our Privacy Statement.
Your information is controlled by SudoVanilla B.V. and SudoVanilla Inc. If you have questions or concerns about the way we are handling your Personal Data, please email us with the subject line “Privacy Concern” at